CVE-2023-22413

An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when specific IPv4 packets are processed by an IPsec6 tunnel, the Multiservices PIC Management Daemon (mspmand) process will core and restart. This will lead to FPC crash. Traffic flow is impacted while mspmand restarts. Continued receipt of these specific packets will cause a sustained Denial of Service (DoS) condition. This issue only occurs if an IPv4 address is not configured on the multiservice interface. This issue affects: Juniper Networks Junos OS on MX Series All versions prior to 19.4R3-S9; 20.1 version 20.1R3-S5 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2.

• CWE-703

• https://kb.juniper.net/JSA70209Vendor Advisory
• https://kb.juniper.net/JSA70209Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22408An Improper Validation of Array Index vulnerability in the S…7.5
• CVE-2023-22409An Unchecked Input for Loop Condition vulnerability in a NAT…5.5
• CVE-2023-2241A vulnerability, which was classified as critical, was found…5.3
• CVE-2023-22410A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22411An Out-of-Bounds Write vulnerability in Flow Processing Daem…7.5
• CVE-2023-22412An Improper Locking vulnerability in the SIP ALG of Juniper …7.5
• CVE-2023-22414A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22415An Out-of-Bounds Write vulnerability in the H.323 ALG of Jun…7.5
• CVE-2023-22416A Buffer Overflow vulnerability in SIP ALG of Juniper Networ…7.5
• CVE-2023-22417A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2023-22418On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, …6.1
• CVE-2023-22419Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8